
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3d5afa60-5901-467d-b47d-e1e2fc1745e5.roa
File: 3d5afa60-5901-467d-b47d-e1e2fc1745e5.roa (raw, json)
Hash identifier: VWBRpG1lBVFOCH8jOkY+eui9rEGGa4J2mmangU4LmCs=
Subject key identifier: BB:6C:D4:A6:C2:80:19:74:C9:83:53:70:A1:55:9C:F3:08:B6:12:3B
Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Certificate serial: 215D0852C7654D283D611C47CCF117C1D11E3402
Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3d5afa60-5901-467d-b47d-e1e2fc1745e5.roa
Signing time: Tue 04 Nov 2025 02:10:42 +0000
ROA not before: Tue 04 Nov 2025 02:10:42 +0000
ROA not after: Tue 09 Dec 2025 23:59:59 +0000
asID: 16509
IP address blocks: 54.191.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:5d:08:52:c7:65:4d:28:3d:61:1c:47:cc:f1:17:c1:d1:1e:34:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476
Validity
Not Before: Nov 4 02:10:42 2025 GMT
Not After : Dec 9 23:59:59 2025 GMT
Subject: serialNumber=60f4dbc2e4d061d4d08903618e06831a78a8d4106821dc0979e88b013efdf47e, CN=5f276045-5b9f-45ef-923d-f3fce24a6225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8e:54:46:77:49:0e:26:36:b4:94:9a:e9:cf:
9e:c9:64:9c:60:a3:f5:c7:de:4d:34:54:63:c0:4a:
cf:e7:b8:06:c0:4d:bb:85:42:03:58:23:c7:43:20:
9e:09:1f:bc:14:eb:58:bd:3e:d9:18:9d:d8:84:25:
ef:fe:91:5e:90:b9:45:8e:f0:88:67:4f:9b:04:ba:
f3:ed:3f:90:60:40:8b:ee:77:2f:45:0b:fd:84:04:
58:15:81:a8:50:fd:89:51:48:65:a6:df:d6:e9:e0:
dd:4b:90:bf:6f:86:41:b6:94:7b:0f:39:89:dc:b1:
dc:10:bd:78:90:d4:f8:7d:d5:4f:03:ce:26:7d:08:
b6:ba:1f:cb:68:68:15:99:a7:76:d4:94:8e:a9:93:
49:21:c3:49:cf:b2:9b:96:f0:d1:fe:2c:08:d1:88:
e7:59:6c:d3:0c:9f:b8:19:c4:8a:7e:80:bb:0c:27:
d5:c2:08:14:b3:28:2c:20:88:ad:4a:40:d8:6b:8d:
eb:ab:65:20:51:a3:c1:d2:42:b5:f2:40:00:ae:68:
a6:e5:a0:c7:3d:6c:8b:cf:ec:6b:b4:f8:78:f7:2d:
e9:4a:d6:2c:c1:7e:fa:27:2a:58:2e:36:15:ad:24:
b5:90:01:15:83:43:6f:38:46:61:67:ed:6f:21:0d:
33:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:6C:D4:A6:C2:80:19:74:C9:83:53:70:A1:55:9C:F3:08:B6:12:3B
X509v3 Authority Key Identifier:
keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/3d5afa60-5901-467d-b47d-e1e2fc1745e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
54.191.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a7:a1:8c:34:34:37:0e:b3:2d:88:fa:ae:1d:d4:e0:ef:f1:dd:
ff:36:df:ca:88:d5:e0:48:29:08:16:7b:08:42:48:b6:4e:b9:
61:f1:f8:fb:69:f7:4a:f5:6b:67:13:46:26:45:6d:09:14:ba:
4b:0e:8a:6a:7b:36:83:6b:c9:c0:35:cf:f7:98:f1:6d:8b:03:
e5:59:36:2a:dc:87:e7:a6:34:40:db:04:5a:95:01:47:77:76:
98:26:c0:c3:fa:17:15:40:e6:34:4e:54:a9:4d:9a:28:8b:85:
cd:d9:0d:08:52:f2:ab:77:cd:e0:07:77:47:c1:1d:2e:b9:f0:
26:ef:e6:bb:65:a8:33:06:2d:6e:d1:b3:c5:37:59:15:1b:2f:
8e:6c:9b:28:a5:1f:10:eb:9d:1f:a8:98:5b:96:df:57:06:66:
9a:ad:9b:83:97:7f:46:43:06:e9:40:2e:a2:b8:88:56:4a:18:
eb:f6:09:4c:18:af:cc:43:ef:d1:e7:ab:78:2b:54:74:3d:8f:
63:ba:f1:d1:77:bd:fe:e8:e0:1f:7b:8a:d4:3d:bf:a2:19:01:
7b:ed:f0:b7:c4:5c:42:77:2a:ed:20:98:c7:28:28:48:b9:af:
ef:aa:90:9e:ae:6a:e0:58:c3:45:58:e2:79:57:f5:94:d3:2c:
f2:18:2d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:53:46 2025 by rpki-client